Sometimes you have an article on a news website, that tells something scary and doesn’t backup it’s claims. Today there’s another one of those published at ZDNet: http://blogs.zdnet.com/security/?p=3476 

“20.000 sites hit with drive-by malware attack code”, which does not include:

• Which type of vulnerability was used.
• Which platform(s) where affected.
• Which sites were affected. (I can assume that’s something they don’t want to publish because those companies might get hurt if they did.)
• How those sites got affected.
• Did some hackers get caught?
• Where did these attacks come from?
• …

But in the mean time, webmasters are worried about their sites, and this kind of news does not tell anyone how to protect their sites against these attacks. So please explain me, what is the use of putting an article like this in the wild? The only reason I can think of, it getting more advertising revenue.

So folks at ZDNet: Do your research, post a complete story and don’t go into scare tactics, most people are more than tired of that, including yours truly.

Monday, June 01, 2009 4:21:31 PM (Pacific SA Standard Time, UTC-04:00)      Comments [0]